topic Re: PIX Design Question in Network Security https://community.cisco.com/t5/network-security/pix-design-question/m-p/167204#M618233 <HTML><HEAD></HEAD><BODY><P>The phrase multi-tiered DMZ doesn't really ring a bell. I don't remember coming accross such a term or having read about such setups and that would translate to only one thing, tougher troubleshooting. I would definately recommend going in for a design similar to what you are likely to see deployed commonly. That would not only help while troubleshooting but also help since a wealth of documentation is likely to be available. </P></BODY></HTML> Mon, 16 Dec 2002 22:30:29 GMT thomas.chen 2002-12-16T22:30:29Z PIX Design Question https://community.cisco.com/t5/network-security/pix-design-question/m-p/167203#M618208 <P>I have a situation where I utilize CacheFlow devices to serve up web content for a high traffic web site. In considering new secure architecture - I have two options, creating two seperate DMZ segments - one for the redundant CacheFlows and another that contains the physical web servers. The other option is creating one multi-tiered DMZ segment that utilizes another PIX between the CacheFlow segment (Outside) to the segment (Inside) where the physical web servers reside. From a security perspective, what are some of the advantages/drawbacks of each design. Thanks for any help that you provide.</P> Fri, 21 Feb 2020 06:25:38 GMT https://community.cisco.com/t5/network-security/pix-design-question/m-p/167203#M618208 rm2017 2020-02-21T06:25:38Z Re: PIX Design Question https://community.cisco.com/t5/network-security/pix-design-question/m-p/167204#M618233 <HTML><HEAD></HEAD><BODY><P>The phrase multi-tiered DMZ doesn't really ring a bell. I don't remember coming accross such a term or having read about such setups and that would translate to only one thing, tougher troubleshooting. I would definately recommend going in for a design similar to what you are likely to see deployed commonly. That would not only help while troubleshooting but also help since a wealth of documentation is likely to be available. </P></BODY></HTML> Mon, 16 Dec 2002 22:30:29 GMT https://community.cisco.com/t5/network-security/pix-design-question/m-p/167204#M618233 thomas.chen 2002-12-16T22:30:29Z